ZCodec

It is an adware program that downloads and runs files, changes the DNS configuration and monitors accesses to several adult websites. It can be voluntarily downloaded from a certain website.

Affected platforms:

Windows 2003/XP/2000/NT/ME/98/95

First detected on:

Aug. 28, 2006

Detection updated on:

Sept. 27, 2007

Statistics

No

Proactive protection:

Yes, using TruPrevent Technologies

Brief Description

ZCodec is an adware program that passes itself off as a video codec.

It accesses an IP address on the Internet in order to download and run a certain file at random. This file can be of any nature. For example, ZCodec could download the Trojan Ruins.MB, which uses rootkit techniques in order to hide itself. Or, it could install an online casino.

ZCodec also changes the DNS configuration and monitors if the user accesses any of several adult websites.

ZCodec can be voluntarily downloaded from a certain website.

Visible Symptoms

ZCodec is difficult to recognize, as it does not display any messages or warnings that indicate it has reached the computer.